High
Single Scan
GGUF
Structural
A tensor with a zero dimension
See the real report
This isn't a mockup — the screenshot above is cropped from a real, cached scan report.
This isn't a mockup — the screenshot above is cropped from a real, cached scan report.
We set one dimension of blk.0.ffn_gate.weight to 0. A tensor with a zero-length dimension is a degenerate case that valid conversion pipelines never produce, but that a malformed or hand-tampered GGUF file can carry through the header without complaint.
Runtimes that compute element counts by multiplying dimensions together, then divide file bytes by that count to determine per-element size, are exposed here: dividing by zero, or treating a zero-size tensor as if it had real data, is a reliable way to crash or misbehave.
This is a smaller, quieter cousin of the dimension-overflow case above — same family of bug (trusting declared shape metadata without bounds-checking it), opposite direction (too small instead of too large).